dkirwan/infra-ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

Nagios: remove nrpe from a bunch of smaller things

Browse source 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
This commit is contained in:
Greg Sutcliffe 2026-07-01 13:25:24 +01:00
commit 6eac650a10
Signed by: gwmngilfen
SSH key fingerprint: SHA256:dNHcz65ApR68w2TkCIAXDBdt4oNL62Fyx48U7dXWuk0
3 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/haproxy/templates/haproxy.cfg
View file

@ -5,7 +5,7 @@ global
user haproxy
group haproxy
daemon
stats socket /var/run/haproxy-stat user haproxy group nrpe mode 0664
stats socket /var/run/haproxy-stat user haproxy group zabbix mode 0664
stats socket /var/run/haproxy-admin level admin user root group root mode 0660
#debug
#quiet

8
roles/ipa/client/templates/fedora-nss-ignore.conf.j2
View file

@ -6,13 +6,13 @@
## creating restricted accounts but we want to make sure the id in
## /etc/passwd and /etc/group are used.
[nss]
filter_users = root,bin,daemon,adm,lp,sync,shutdown,halt,mail,operator,games,ftp,nobody,avahi-autoipd,dbus,polkitd,rpc,tss,ntp,rpcuser,nfsnobody,postfix,sshd,nagios,nrpe,openvpn,chrony,sssd,named,apache,blockerbugs,mirrormanager,postgres,zabbix,ftbfs,masher,git,paguremirroring
filter_groups = root,bin,daemon,sys,adm,tty,disk,lp,mem,kmem,wheel,cdrom,mail,man,dialout,floppy,games,tape,video,ftp,lock,audio,nobody,users,utmp,utempter,avahi-autoipd,ssh_keys,systemd-journal,dbus,rpc,tss,ntp,dip,rpcuser,nfsnobody,postdrop,postfix,sshd,screen,nagios,nrpe,openvpn,input,systemd-bus-proxy,systemd-network,cgred,chrony,printadmin,sssd,named,apache,blockerbugs,mirrormanager,postgres,ftbfs,masher,git,paguremirroring
filter_users = root,bin,daemon,adm,lp,sync,shutdown,halt,mail,operator,games,ftp,nobody,avahi-autoipd,dbus,polkitd,rpc,tss,ntp,rpcuser,nfsnobody,postfix,sshd,nagios,openvpn,chrony,sssd,named,apache,blockerbugs,mirrormanager,postgres,zabbix,ftbfs,masher,git,paguremirroring
filter_groups = root,bin,daemon,sys,adm,tty,disk,lp,mem,kmem,wheel,cdrom,mail,man,dialout,floppy,games,tape,video,ftp,lock,audio,nobody,users,utmp,utempter,avahi-autoipd,ssh_keys,systemd-journal,dbus,rpc,tss,ntp,dip,rpcuser,nfsnobody,postdrop,postfix,sshd,screen,nagios,openvpn,input,systemd-bus-proxy,systemd-network,cgred,chrony,printadmin,sssd,named,apache,blockerbugs,mirrormanager,postgres,ftbfs,masher,git,paguremirroring
{% else %}
## This file contains users who are in ipa to stop people from
## creating restricted accounts but we want to make sure the id in
## /etc/passwd and /etc/group are used.
[nss]
filter_users = root,bin,daemon,adm,lp,sync,shutdown,halt,mail,operator,games,ftp,nobody,avahi-autoipd,dbus,polkitd,rpc,tss,ntp,rpcuser,nfsnobody,postfix,sshd,nagios,nrpe,openvpn,chrony,sssd,named,mock,apache,bodhi,ftpsync,blockerbugs,mirrormanager,rabbitmq,postgres,rawhide,mysql,zabbix,pagure,ftbfs,masher,git,paguremirroring
filter_groups = root,bin,daemon,sys,adm,tty,disk,lp,mem,kmem,wheel,cdrom,mail,man,dialout,floppy,games,tape,video,ftp,lock,audio,nobody,users,utmp,utempter,avahi-autoipd,ssh_keys,systemd-journal,dbus,rpc,tss,ntp,dip,rpcuser,nfsnobody,postdrop,postfix,sshd,screen,nagios,nrpe,openvpn,input,systemd-bus-proxy,systemd-network,cgred,chrony,printadmin,sssd,named,mock,apache,blockerbugs,mirrormanager,rabbitmq,postgres,rawhide,mysql,pagure,ftbfs,masher,git,paguremirroring
filter_users = root,bin,daemon,adm,lp,sync,shutdown,halt,mail,operator,games,ftp,nobody,avahi-autoipd,dbus,polkitd,rpc,tss,ntp,rpcuser,nfsnobody,postfix,sshd,nagios,openvpn,chrony,sssd,named,mock,apache,bodhi,ftpsync,blockerbugs,mirrormanager,rabbitmq,postgres,rawhide,mysql,zabbix,pagure,ftbfs,masher,git,paguremirroring
filter_groups = root,bin,daemon,sys,adm,tty,disk,lp,mem,kmem,wheel,cdrom,mail,man,dialout,floppy,games,tape,video,ftp,lock,audio,nobody,users,utmp,utempter,avahi-autoipd,ssh_keys,systemd-journal,dbus,rpc,tss,ntp,dip,rpcuser,nfsnobody,postdrop,postfix,sshd,screen,nagios,openvpn,input,systemd-bus-proxy,systemd-network,cgred,chrony,printadmin,sssd,named,mock,apache,blockerbugs,mirrormanager,rabbitmq,postgres,rawhide,mysql,pagure,ftbfs,masher,git,paguremirroring
{% endif %}

4
roles/pagure/tasks/selinux.yml
View file

@ -101,10 +101,10 @@
- selinux
- pagure
- name: Set sebooleans so allow nagios/nrpe to call sudo from NRPE utils scripts
- name: Set sebooleans to deny nagios/nrpe to call sudo as it's gone
ansible.posix.seboolean:
name: nagios_run_sudo
state: true
state: false
persistent: true
tags:
- config